A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://www.moneylion.com/.well-known/security.txt
Contact: mailto:cybersecurity@moneylion.com
Encryption: https://www.moneylion.com/pgp-key.txt
Expires: 2026-03-31T02:00:00Z
Policy: https://www.moneylion.com/security-policy.txt
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=Nu/c
-----END PGP SIGNATURE-----